Privacy policy

Your information, kept to a minimum.

We ask for little, keep it safe and never sell it. This policy covers codedforbeauty.com and the studios on our plans. The sites we run for studios have their own policy for their clients.

Last updated
23 October 2026
Data controller
Swepth Oy, Finland
Business ID
3619574-3
Contact
hello@codedforbeauty.com
What changed
01

Who we are

  1. 1.1

    Coded for Beauty is a trading name of Swepth Oy, a company registered in Finland under Business ID 3619574-3. Swepth Oy is the data controller for this website, which means we decide how the information you send us is used, and we answer for it.

  2. 1.2

    For anything about your information, write to hello@codedforbeauty.com.

02

What we collect

  1. 2.1

    Only what you choose to send us, and only for the reason you send it.

  2. 2.2

    When you ask for your free homepage design:

    • your Instagram handle and, if you add it, your studio name
    • the look you pick, the treatments you offer and how clients book with you now
    • whether two or more artists work with you
    • your name and email address, so we can send you your design
    • the time you sent it and the page you sent it from
  3. 2.3

    When you use our contact form: your email address and your message, plus your name and Instagram handle if you add them.

  4. 2.4

    When you become a client: your setup page asks for what we need to build your site: your business details, treatments and prices, opening hours, booking rules and the photos you choose to upload. While your plan runs, we also keep your studio account (your name, your email for sign-in codes and your studio’s settings) and the record of your monthly payments. Stripe handles your card, and we never see its number.

  5. 2.5

    Your clients’ information: when your clients book, pay or fill in a form on your site, their details are stored in our booking system for you. For that information, you are the controller and we are your processor: we use it only to run your plan, as clause 11 of our terms sets out. Your site’s own privacy policy explains it to your clients.

  6. 2.6

    Nothing leaves your browser until you press Send.

03

Why we use it

  1. 3.1

    Data protection law asks us to name a legal basis for each use. These are ours.

    What we use it forLegal basis
    Designing your free homepage, and replying to your request or messageSteps you ask us to take before a contract, and our legitimate interest in answering enquiries
    Building your site and running your plan, including your studio account and monthly paymentsOur contract with you
    Keeping invoices and project recordsOur duties under accounting law
    Counting visits to this siteYour consent, which you can withdraw at any time
  2. 3.2

    We don’t use your information for anything else. We don’t sell it, we don’t add you to a mailing list, and we make no decisions about you by automated means.

04

Who helps us

  1. 4.1

    A few providers handle information for us, each only to provide its own service. We keep no database of requests or messages: the email in our inbox is the record. Booking data for studios on a plan is held in our booking system, on servers in London.

    ProviderWhat they do for us
    VercelHosts this website and runs its forms. Like every host, it keeps technical logs, such as IP addresses, for security.
    CloudflareRuns the booking system, the studio sites on it and their apps. Like every host, it keeps technical logs, such as IP addresses, for security.
    NeonStores the booking system’s data, on servers in London.
    ResendDelivers the emails our forms send, and the booking emails studios send to their clients.
    Google WorkspaceRuns our inbox, where requests and messages are kept.
    Google AnalyticsCounts visits, and only if you allow it.
    StripeTakes our monthly plan payments, and studios’ client deposits into their own Stripe accounts. We never see a card number.
05

Where your information goes

  1. 5.1

    Some of these providers are based in the United States. Where your information leaves the UK or the EEA, it is protected by the safeguards the law requires, such as standard contractual clauses.

06

Cookies and storage

  1. 6.1

    This site needs no cookies to work, and analytics stays off until you allow it. Until then, the analytics script is not loaded at all.

    NameWhat it doesHow long
    cfb.consentRemembers your cookie choice. Kept in your browser, never sent to us.Until you clear it
    cfb.studioRemembers the studio name you type into our booking demo, so the demo stays yours on your next visit. Kept in your browser, and only sent to us if you add it to a request.Until you clear it
    cfb-welcomeOn your setup page, once you are a client, keeps your answers and photos on this device as you go, so you can stop and come back. Kept in your browser, and only sent to us when you press Send.Until you send them or clear it
    _ga, _ga_*Google Analytics cookies, set only after you allow them. They count visits and which steps lead to a request.Up to 2 years
  2. 6.2

    Google signals and advertising features are switched off, and nothing is used for ads. Our typefaces are served from our own domain, so no other company sees your visit to deliver them.

07

How we keep it safe

  1. 7.1

    Booking data is encrypted in transit and at rest, on servers in London. Only our team can reach it, and only to run the system or when a studio asks us for help. Everyone who can reach it is bound to keep it confidential.

  2. 7.2

    Our inbox and our provider accounts are protected by sign-in codes, and we never ask anyone for a password by message.

08

How long we keep it

  1. 8.1

    Requests and messages stay in our inbox while we are talking, and for up to 24 months afterwards, so we can pick up where a project left off. Then we delete them.

  2. 8.2

    If you become a client, we keep your studio account for as long as your plan runs. When it ends, we send you your client list and delete your clients’ information within 30 days, as our terms set out. Invoices and payment records are kept for as long as accounting law requires.

  3. 8.3

    If you ask us to delete your information sooner, we will, unless the law says we must keep it.

09

Your rights

  1. 9.1

    You can ask us to show you the information we hold about you, to correct it or to delete it. You can also ask us to limit how we use it, object to it, or send you a copy to take elsewhere. Where we rely on your consent, you can withdraw it at any time.

  2. 9.2

    Write to hello@codedforbeauty.com and we will reply within one month.

10

Complaints

  1. 10.1

    If you are unhappy with how we have handled your information, tell us first and we will do our best to put it right.

  2. 10.2

    You can also complain to a data protection authority. In the UK, that is the Information Commissioner’s Office. In Finland, where we are registered, it is the Data Protection Ombudsman.

11

Children

  1. 11.1

    Our services are for businesses, and this site is not meant for anyone under 18.

12

Changes to this policy

  1. 12.1

    If we change how we use your information, we update this page and the date at the top changes with it.

What changed on 23 October 2026

The table in clause 6 now names cfb-welcome, where your setup page keeps your answers on your own device until you send them. Nothing else changed.

On 22 October 2026: the free homepage design request now asks for your studio name and the look you like, and the list in clause 2.2 says so.

Our booking demo can remember the studio name you type into it, in your own browser (cfb.studio). The unfinished brief we used to keep in your browser (cfb.brief) is gone.

We added how we keep your information safe (clause 7), where it goes (clause 5) and a note on children (clause 11).

A question about your data?

Write to us. A person reads every message, and we answer every one.

hello@codedforbeauty.comRead our terms